Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
File: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer (raw, json)
Hash identifier: HuGpluHsoSg1y21eha3ggJJb0RGbEgqFDZdCeQprNio=
Subject key identifier: D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FDB40381287F9895AB1D68F26B02A0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.249.80.0/22
IP: 2a0c:140::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:b4:03:81:28:7f:98:95:ab:1d:68:f2:6b:02:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6f357c54949f20b400883ed8c98d3731c3cb495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cf:70:c2:be:52:81:5a:ac:ca:04:ec:b3:f8:
35:68:26:a6:75:95:d3:80:92:e8:f2:ad:63:68:61:
2f:2e:54:c8:54:21:49:69:fc:af:cc:b4:16:23:f9:
eb:a7:9d:a7:17:53:e0:4b:ed:e0:44:ec:5d:5b:54:
c2:81:05:20:ac:3f:2b:c3:55:29:b0:07:3f:16:37:
fa:33:79:4c:a1:5b:28:07:3d:db:6f:5f:fb:32:e8:
47:53:dd:f1:f9:28:14:12:ee:32:87:0f:22:04:bb:
c7:c3:5e:49:47:6c:70:76:2f:f8:ed:1e:db:aa:49:
29:b3:6e:12:71:46:a6:eb:9a:a3:6e:88:cd:da:a1:
0d:3f:3a:64:66:0a:3c:99:0d:36:21:e1:0b:b4:c8:
58:86:ca:1d:47:7b:08:2b:bb:36:fc:69:e9:60:06:
ec:1b:49:24:f1:e1:f4:c9:cb:a6:4d:03:62:20:41:
86:42:e9:88:f2:c0:f2:f5:e7:af:dd:b5:bd:ad:49:
ec:95:c3:50:ce:5e:0b:5c:be:a1:84:a2:eb:bf:b2:
d3:37:40:54:b5:28:cd:60:19:1a:0e:4f:18:3e:55:
62:fd:ca:60:00:97:92:16:f8:d2:fd:c4:1b:26:f0:
bd:bd:2b:66:c0:df:43:ec:81:41:c9:5e:41:50:60:
62:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.80.0/22
IPv6:
2a0c:140::/29
Signature Algorithm: sha256WithRSAEncryption
06:2b:16:1f:17:fc:86:79:5a:b6:af:5d:20:fa:97:3e:ae:be:
10:b9:af:b1:7d:f5:64:3f:cb:40:d2:48:12:c2:53:e7:6d:d3:
7d:56:69:0f:c2:10:29:1c:1b:c9:ee:c3:11:c0:1b:0d:dd:46:
15:e3:d6:8f:b5:44:d8:33:81:e9:dd:b6:11:82:41:bb:8f:7c:
d2:43:c9:87:8c:54:da:c3:23:1c:0e:fc:6f:b4:13:63:76:36:
ac:c1:f7:e4:f4:28:ec:15:f7:87:95:7c:f5:86:11:7b:b7:c9:
d3:31:db:eb:2e:75:af:68:c5:57:e9:e6:38:7f:f4:a9:b0:27:
64:c0:bc:b9:dd:f0:73:f7:bc:ac:39:b7:08:04:48:9f:23:ee:
16:1c:e7:74:63:eb:c5:a0:fe:1f:62:e0:81:f4:7b:f9:5b:c9:
ec:25:69:99:0e:74:ec:15:4b:4e:30:8e:ec:7e:be:bf:6c:58:
f6:a1:67:ae:14:85:95:2c:6b:a2:2c:e2:63:95:90:b5:10:0f:
17:c5:d4:2b:fb:ce:08:7d:b1:5d:52:0b:48:8f:83:66:bc:2e:
75:4c:d3:68:4a:fb:40:41:ec:12:d4:57:88:ef:32:15:01:b8:
e3:3d:5d:6f:3e:cf:ea:a4:1b:c5:48:30:2a:9e:be:2d:ab:20:
b0:00:d4:27
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQl/bQDgSh/mJWrHWjyawKgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0OTMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmYzNTdjNTQ5NDlmMjBiNDAwODgzZWQ4Yzk4ZDM3MzFjM2NiNDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus9wwr5SgVqsygTss/g1aCamdZXT
gJLo8q1jaGEvLlTIVCFJafyvzLQWI/nrp52nF1PgS+3gROxdW1TCgQUgrD8rw1Up
sAc/Fjf6M3lMoVsoBz3bb1/7MuhHU93x+SgUEu4yhw8iBLvHw15JR2xwdi/47R7b
qkkps24ScUam65qjbojN2qENPzpkZgo8mQ02IeELtMhYhsodR3sIK7s2/GnpYAbs
G0kk8eH0ycumTQNiIEGGQumI8sDy9eev3bW9rUnslcNQzl4LXL6hhKLrv7LTN0BU
tSjNYBkaDk8YPlVi/cpgAJeSFvjS/cQbJvC9vStmwN9D7IFByV5BUGBikQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFNbzV8VJSfILQAiD7YyY03McPLSVMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U0LzI4MWVk
Yi0wZDQyLTQwN2EtYjQ1OS0wNWYwOWVmODZlN2IvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQvMjgxZWRi
LTBkNDItNDA3YS1iNDU5LTA1ZjA5ZWY4NmU3Yi8xLzF2Tlh4VWxKOGd0QUNJUHRq
SmpUY3h3OHRKVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuflQMA0EAgACMAcDBQMqDAFAMA0GCSqGSIb3
DQEBCwUAA4IBAQAGKxYfF/yGeVq2r10g+pc+rr4Qua+xffVkP8tA0kgSwlPnbdN9
VmkPwhApHBvJ7sMRwBsN3UYV49aPtUTYM4Hp3bYRgkG7j3zSQ8mHjFTawyMcDvxv
tBNjdjaswffk9CjsFfeHlXz1hhF7t8nTMdvrLnWvaMVX6eY4f/SpsCdkwLy53fBz
97ysObcIBEifI+4WHOd0Y+vFoP4fYuCB9Hv5W8nsJWmZDnTsFUtOMI7sfr6/bFj2
oWeuFIWVLGuiLOJjlZC1EA8XxdQr+84IfbFdUgtIj4NmvC51TNNoSvtAQewS1FeI
7zIVAbjjPV1vPs/qpBvFSDAqnr4tqyCwANQn
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:41:32 2025 by rpki-client